diff --git a/templates/layout.tmpl b/templates/layout.tmpl
--- a/templates/layout.tmpl
+++ b/templates/layout.tmpl
@@ -28,16 +28,74 @@
     <nav class="bg-gradient-to-br from-brown-800 to-brown-900 text-white shadow-xl border-b-2 border-brown-600">
         <div class="container mx-auto px-4 py-4">
             <div class="flex items-center justify-between">
-                <a href="/" class="hidden md:flex items-center gap-2 hover:opacity-80 transition">
+                <!-- Logo - always visible -->
+                <a href="/" class="flex items-center gap-2 hover:opacity-80 transition">
                     <h1 class="text-2xl font-bold">☕ Arabica</h1>
                     <span class="text-xs bg-amber-400 text-brown-900 px-2 py-1 rounded-md font-semibold shadow-sm">ALPHA</span>
                 </a>
-                <div class="space-x-4">
-                    <a href="/" class="hover:text-brown-100 transition-colors font-medium">Home</a>
+                
+                <!-- Navigation links -->
+                <div class="flex items-center gap-4">
+                    <!-- Home link - mobile only -->
+                    <a href="/" class="md:hidden hover:text-brown-100 transition-colors font-medium">Home</a>
+                    
                     {{if .IsAuthenticated}}
+                    <!-- Brews link -->
                     <a href="/brews" class="hover:text-brown-100 transition-colors font-medium">Brews</a>
+                    
+                    <!-- New Brew button - commented out for now
                     <a href="/brews/new" class="hover:text-brown-100 transition-colors font-medium">New Brew</a>
-                    <a href="/manage" class="hover:text-brown-100 transition-colors font-medium">Manage</a>
+                    -->
+                    
+                    <!-- User profile dropdown -->
+                    <div x-data="{ open: false }" class="relative">
+                        <button @click="open = !open" @click.outside="open = false" class="flex items-center gap-2 hover:opacity-80 transition focus:outline-none">
+                            {{if and .UserProfile .UserProfile.Avatar}}
+                            {{$safeAvatar := safeAvatarURL .UserProfile.Avatar}}
+                            {{if $safeAvatar}}
+                            <img src="{{$safeAvatar}}" alt="" class="w-8 h-8 rounded-full object-cover ring-2 ring-brown-600" />
+                            {{else}}
+                            <div class="w-8 h-8 rounded-full bg-brown-600 flex items-center justify-center ring-2 ring-brown-500">
+                                <span class="text-sm font-medium">{{if and .UserProfile .UserProfile.DisplayName}}{{slice .UserProfile.DisplayName 0 1}}{{else}}?{{end}}</span>
+                            </div>
+                            {{end}}
+                            {{else}}
+                            <div class="w-8 h-8 rounded-full bg-brown-600 flex items-center justify-center ring-2 ring-brown-500">
+                                <span class="text-sm font-medium">{{if and .UserProfile .UserProfile.DisplayName}}{{slice .UserProfile.DisplayName 0 1}}{{else}}?{{end}}</span>
+                            </div>
+                            {{end}}
+                            <svg class="w-4 h-4 transition-transform" :class="{ 'rotate-180': open }" fill="none" stroke="currentColor" viewBox="0 0 24 24">
+                                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M19 9l-7 7-7-7"></path>
+                            </svg>
+                        </button>
+                        
+                        <!-- Dropdown menu -->
+                        <div x-show="open" x-cloak x-transition:enter="transition ease-out duration-100" x-transition:enter-start="transform opacity-0 scale-95" x-transition:enter-end="transform opacity-100 scale-100" x-transition:leave="transition ease-in duration-75" x-transition:leave-start="transform opacity-100 scale-100" x-transition:leave-end="transform opacity-0 scale-95" class="absolute right-0 mt-2 w-48 bg-white rounded-lg shadow-lg border border-brown-200 py-1 z-50">
+                            {{if and .UserProfile .UserProfile.Handle}}
+                            <div class="px-4 py-2 border-b border-brown-100">
+                                <p class="text-sm font-medium text-brown-900 truncate">{{if .UserProfile.DisplayName}}{{.UserProfile.DisplayName}}{{else}}{{.UserProfile.Handle}}{{end}}</p>
+                                <p class="text-xs text-brown-500 truncate">@{{.UserProfile.Handle}}</p>
+                            </div>
+                            {{end}}
+                            <a href="/profile/{{if and .UserProfile .UserProfile.Handle}}{{.UserProfile.Handle}}{{else}}{{.UserDID}}{{end}}" class="block px-4 py-2 text-sm text-brown-700 hover:bg-brown-50 transition-colors">
+                                View Profile
+                            </a>
+                            <a href="/manage" class="block px-4 py-2 text-sm text-brown-700 hover:bg-brown-50 transition-colors">
+                                Manage Records
+                            </a>
+                            <a href="#" class="block px-4 py-2 text-sm text-brown-400 cursor-not-allowed">
+                                Settings (coming soon)
+                            </a>
+                            <div class="border-t border-brown-100 mt-1 pt-1">
+                                <form action="/logout" method="POST">
+                                    <input type="hidden" name="csrf_token" class="csrf-token-field">
+                                    <button type="submit" class="w-full text-left px-4 py-2 text-sm text-brown-700 hover:bg-brown-50 transition-colors">
+                                        Logout
+                                    </button>
+                                </form>
+                            </div>
+                        </div>
+                    </div>
                     {{end}}
                 </div>
             </div>
diff --git a/internal/bff/render.go b/internal/bff/render.go
--- a/internal/bff/render.go
+++ b/internal/bff/render.go
@@ -101,6 +101,13 @@
 	return t, nil
 }
 
+// UserProfile contains user profile data for header display
+type UserProfile struct {
+	Handle      string
+	DisplayName string
+	Avatar      string
+}
+
 // PageData contains data for rendering pages
 type PageData struct {
 	Title           string
@@ -113,6 +120,7 @@
 	FeedItems       []*feed.FeedItem
 	IsAuthenticated bool
 	UserDID         string
+	UserProfile     *UserProfile
 }
 
 // BrewData wraps a brew with pre-serialized JSON for pours
@@ -138,8 +146,14 @@
 	return t.ExecuteTemplate(w, "layout", data)
 }
 
+// RenderTemplateWithProfile renders a template with layout and user profile
+func RenderTemplateWithProfile(w http.ResponseWriter, tmpl string, data *PageData, userProfile *UserProfile) error {
+	data.UserProfile = userProfile
+	return RenderTemplate(w, tmpl, data)
+}
+
 // RenderHome renders the home page
-func RenderHome(w http.ResponseWriter, isAuthenticated bool, userDID string, feedItems []*feed.FeedItem) error {
+func RenderHome(w http.ResponseWriter, isAuthenticated bool, userDID string, userProfile *UserProfile, feedItems []*feed.FeedItem) error {
 	t, err := parsePageTemplate("home.tmpl")
 	if err != nil {
 		return err
@@ -148,13 +162,14 @@
 		Title:           "Home",
 		IsAuthenticated: isAuthenticated,
 		UserDID:         userDID,
+		UserProfile:     userProfile,
 		FeedItems:       feedItems,
 	}
 	return t.ExecuteTemplate(w, "layout", data)
 }
 
 // RenderBrewList renders the brew list page
-func RenderBrewList(w http.ResponseWriter, brews []*models.Brew, isAuthenticated bool, userDID string) error {
+func RenderBrewList(w http.ResponseWriter, brews []*models.Brew, isAuthenticated bool, userDID string, userProfile *UserProfile) error {
 	t, err := parsePageTemplate("brew_list.tmpl")
 	if err != nil {
 		return err
@@ -174,12 +189,13 @@
 		Brews:           brewList,
 		IsAuthenticated: isAuthenticated,
 		UserDID:         userDID,
+		UserProfile:     userProfile,
 	}
 	return t.ExecuteTemplate(w, "layout", data)
 }
 
 // RenderBrewForm renders the brew form page
-func RenderBrewForm(w http.ResponseWriter, beans []*models.Bean, roasters []*models.Roaster, grinders []*models.Grinder, brewers []*models.Brewer, brew *models.Brew, isAuthenticated bool, userDID string) error {
+func RenderBrewForm(w http.ResponseWriter, beans []*models.Bean, roasters []*models.Roaster, grinders []*models.Grinder, brewers []*models.Brewer, brew *models.Brew, isAuthenticated bool, userDID string, userProfile *UserProfile) error {
 	t, err := parsePageTemplate("brew_form.tmpl")
 	if err != nil {
 		return err
@@ -204,12 +220,13 @@
 		Brew:            brewData,
 		IsAuthenticated: isAuthenticated,
 		UserDID:         userDID,
+		UserProfile:     userProfile,
 	}
 	return t.ExecuteTemplate(w, "layout", data)
 }
 
 // RenderManage renders the manage page
-func RenderManage(w http.ResponseWriter, beans []*models.Bean, roasters []*models.Roaster, grinders []*models.Grinder, brewers []*models.Brewer, isAuthenticated bool, userDID string) error {
+func RenderManage(w http.ResponseWriter, beans []*models.Bean, roasters []*models.Roaster, grinders []*models.Grinder, brewers []*models.Brewer, isAuthenticated bool, userDID string, userProfile *UserProfile) error {
 	t, err := parsePageTemplate("manage.tmpl")
 	if err != nil {
 		return err
@@ -222,6 +239,7 @@
 		Brewers:         brewers,
 		IsAuthenticated: isAuthenticated,
 		UserDID:         userDID,
+		UserProfile:     userProfile,
 	}
 	return t.ExecuteTemplate(w, "layout", data)
 }
@@ -292,10 +310,11 @@
 	Brewers         []*models.Brewer
 	IsAuthenticated bool
 	UserDID         string
+	UserProfile     *UserProfile
 }
 
 // RenderProfile renders a user's public profile page
-func RenderProfile(w http.ResponseWriter, profile *atproto.Profile, brews []*models.Brew, beans []*models.Bean, roasters []*models.Roaster, grinders []*models.Grinder, brewers []*models.Brewer, isAuthenticated bool, userDID string) error {
+func RenderProfile(w http.ResponseWriter, profile *atproto.Profile, brews []*models.Brew, beans []*models.Bean, roasters []*models.Roaster, grinders []*models.Grinder, brewers []*models.Brewer, isAuthenticated bool, userDID string, userProfile *UserProfile) error {
 	t, err := parsePageTemplate("profile.tmpl")
 	if err != nil {
 		return err
@@ -316,12 +335,13 @@
 		Brewers:         brewers,
 		IsAuthenticated: isAuthenticated,
 		UserDID:         userDID,
+		UserProfile:     userProfile,
 	}
 	return t.ExecuteTemplate(w, "layout", data)
 }
 
 // Render404 renders the 404 not found page
-func Render404(w http.ResponseWriter, isAuthenticated bool, userDID string) error {
+func Render404(w http.ResponseWriter, isAuthenticated bool, userDID string, userProfile *UserProfile) error {
 	t, err := parsePageTemplate("404.tmpl")
 	if err != nil {
 		return err
@@ -330,6 +350,7 @@
 		Title:           "Page Not Found",
 		IsAuthenticated: isAuthenticated,
 		UserDID:         userDID,
+		UserProfile:     userProfile,
 	}
 	w.WriteHeader(http.StatusNotFound)
 	return t.ExecuteTemplate(w, "layout", data)
diff --git a/internal/handlers/handlers.go b/internal/handlers/handlers.go
--- a/internal/handlers/handlers.go
+++ b/internal/handlers/handlers.go
@@ -81,6 +81,33 @@
 	return ""
 }
 
+// getUserProfile fetches the profile for an authenticated user.
+// Returns nil if unable to fetch profile (non-fatal error).
+func (h *Handler) getUserProfile(ctx context.Context, did string) *bff.UserProfile {
+	if did == "" {
+		return nil
+	}
+
+	publicClient := atproto.NewPublicClient()
+	profile, err := publicClient.GetProfile(ctx, did)
+	if err != nil {
+		log.Warn().Err(err).Str("did", did).Msg("Failed to fetch user profile for header")
+		return nil
+	}
+
+	userProfile := &bff.UserProfile{
+		Handle: profile.Handle,
+	}
+	if profile.DisplayName != nil {
+		userProfile.DisplayName = *profile.DisplayName
+	}
+	if profile.Avatar != nil {
+		userProfile.Avatar = *profile.Avatar
+	}
+
+	return userProfile
+}
+
 // getAtprotoStore creates a user-scoped atproto store from the request context.
 // Returns the store and true if authenticated, or nil and false if not authenticated.
 func (h *Handler) getAtprotoStore(r *http.Request) (database.Store, bool) {
@@ -113,8 +140,14 @@
 	didStr, err := atproto.GetAuthenticatedDID(r.Context())
 	isAuthenticated := err == nil && didStr != ""
 
+	// Fetch user profile for authenticated users
+	var userProfile *bff.UserProfile
+	if isAuthenticated {
+		userProfile = h.getUserProfile(r.Context(), didStr)
+	}
+
 	// Don't fetch feed items here - let them load async via HTMX
-	if err := bff.RenderHome(w, isAuthenticated, didStr, nil); err != nil {
+	if err := bff.RenderHome(w, isAuthenticated, didStr, userProfile, nil); err != nil {
 		http.Error(w, "Failed to render page", http.StatusInternalServerError)
 		log.Error().Err(err).Msg("Failed to render home page")
 	}
@@ -221,9 +254,10 @@
 	}
 
 	didStr, _ := atproto.GetAuthenticatedDID(r.Context())
+	userProfile := h.getUserProfile(r.Context(), didStr)
 
 	// Don't fetch brews here - let them load async via HTMX
-	if err := bff.RenderBrewList(w, nil, authenticated, didStr); err != nil {
+	if err := bff.RenderBrewList(w, nil, authenticated, didStr, userProfile); err != nil {
 		http.Error(w, "Failed to render page", http.StatusInternalServerError)
 		log.Error().Err(err).Msg("Failed to render brew list page")
 	}
@@ -239,10 +273,11 @@
 	}
 
 	didStr, _ := atproto.GetAuthenticatedDID(r.Context())
+	userProfile := h.getUserProfile(r.Context(), didStr)
 
 	// Don't fetch data from PDS - client will populate dropdowns from cache
 	// This makes the page load much faster
-	if err := bff.RenderBrewForm(w, nil, nil, nil, nil, nil, authenticated, didStr); err != nil {
+	if err := bff.RenderBrewForm(w, nil, nil, nil, nil, nil, authenticated, didStr, userProfile); err != nil {
 		http.Error(w, "Failed to render page", http.StatusInternalServerError)
 		log.Error().Err(err).Msg("Failed to render brew form")
 	}
@@ -263,6 +298,7 @@
 	}
 
 	didStr, _ := atproto.GetAuthenticatedDID(r.Context())
+	userProfile := h.getUserProfile(r.Context(), didStr)
 
 	brew, err := store.GetBrewByRKey(r.Context(), rkey)
 	if err != nil {
@@ -273,7 +309,7 @@
 
 	// Don't fetch dropdown data from PDS - client will populate from cache
 	// This makes the page load much faster
-	if err := bff.RenderBrewForm(w, nil, nil, nil, nil, brew, authenticated, didStr); err != nil {
+	if err := bff.RenderBrewForm(w, nil, nil, nil, nil, brew, authenticated, didStr, userProfile); err != nil {
 		http.Error(w, "Failed to render page", http.StatusInternalServerError)
 		log.Error().Err(err).Msg("Failed to render brew edit form")
 	}
@@ -730,9 +766,10 @@
 	}
 
 	didStr, _ := atproto.GetAuthenticatedDID(r.Context())
+	userProfile := h.getUserProfile(r.Context(), didStr)
 
 	// Don't fetch data here - let it load async via HTMX
-	if err := bff.RenderManage(w, nil, nil, nil, nil, authenticated, didStr); err != nil {
+	if err := bff.RenderManage(w, nil, nil, nil, nil, authenticated, didStr, userProfile); err != nil {
 		http.Error(w, "Failed to render page", http.StatusInternalServerError)
 		log.Error().Err(err).Msg("Failed to render manage page")
 	}
@@ -1084,10 +1121,16 @@
 	didStr, err := atproto.GetAuthenticatedDID(r.Context())
 	isAuthenticated := err == nil && didStr != ""
 
+	var userProfile *bff.UserProfile
+	if isAuthenticated {
+		userProfile = h.getUserProfile(r.Context(), didStr)
+	}
+
 	data := &bff.PageData{
 		Title:           "About",
 		IsAuthenticated: isAuthenticated,
 		UserDID:         didStr,
+		UserProfile:     userProfile,
 	}
 
 	if err := bff.RenderTemplate(w, "about.tmpl", data); err != nil {
@@ -1102,10 +1145,16 @@
 	didStr, err := atproto.GetAuthenticatedDID(r.Context())
 	isAuthenticated := err == nil && didStr != ""
 
+	var userProfile *bff.UserProfile
+	if isAuthenticated {
+		userProfile = h.getUserProfile(r.Context(), didStr)
+	}
+
 	data := &bff.PageData{
 		Title:           "Terms of Service",
 		IsAuthenticated: isAuthenticated,
 		UserDID:         didStr,
+		UserProfile:     userProfile,
 	}
 
 	if err := bff.RenderTemplate(w, "terms.tmpl", data); err != nil {
@@ -1360,8 +1409,13 @@
 	didStr, err := atproto.GetAuthenticatedDID(ctx)
 	isAuthenticated := err == nil && didStr != ""
 
+	var userProfile *bff.UserProfile
+	if isAuthenticated {
+		userProfile = h.getUserProfile(ctx, didStr)
+	}
+
 	// Render profile page
-	if err := bff.RenderProfile(w, profile, brews, beans, roasters, grinders, brewers, isAuthenticated, didStr); err != nil {
+	if err := bff.RenderProfile(w, profile, brews, beans, roasters, grinders, brewers, isAuthenticated, didStr, userProfile); err != nil {
 		http.Error(w, "Failed to render page", http.StatusInternalServerError)
 		log.Error().Err(err).Msg("Failed to render profile page")
 	}
@@ -1373,7 +1427,12 @@
 	didStr, err := atproto.GetAuthenticatedDID(r.Context())
 	isAuthenticated := err == nil && didStr != ""
 
-	if err := bff.Render404(w, isAuthenticated, didStr); err != nil {
+	var userProfile *bff.UserProfile
+	if isAuthenticated {
+		userProfile = h.getUserProfile(r.Context(), didStr)
+	}
+
+	if err := bff.Render404(w, isAuthenticated, didStr, userProfile); err != nil {
 		http.Error(w, "Page not found", http.StatusNotFound)
 		log.Error().Err(err).Msg("Failed to render 404 page")
 	}